FS
Product
Financial Services Analytical Applications Infrastructure
On CISA KEVExploited in the wild
88
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 18High 30Medium 39Low 1
Watch
Add Financial Services Analytical Applications Infrastructure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22965 In wildKEV | 9.8 | Apr 1 | Spring Framework JDK 9+ Remote Code Execution Vulnerability Affected: 8.1.1; 8.1.2.0 |
| CVE-2022-22963 In wildKEV | 9.8 | Apr 1 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability Affected: 8.1.1.0; 8.1.2.0 |
| CVE-2018-14721 | 10.0 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class… Affected: 8.0.2; 8.0.3; 8.0.4; 8.0.5; 8.0.6; 8.0.7 |
| CVE-2025-53037 | 9.8 | Oct 21 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform) Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0 |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 8.0.6 through 8.1.0 |
| CVE-2020-9546 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: 8.0.6 through 8.1.0 |
| CVE-2019-16335 | 9.8 | Sep 15 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: 8.0.2 through 8.0.8 |
| CVE-2019-14540 | 9.8 | Sep 15 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: 8.0.2 through 8.0.8 |
| CVE-2019-14379 | 9.8 | Jul 29 | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of… Affected: 8.0.2 through 8.0.8 |
| CVE-2019-3773 | 9.8 | Jan 18 | Spring Web Services XML External Entity Injection (XXE) Affected: 8.0.6 through 8.1.0 |
| CVE-2018-14720 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from… Affected: 8.0.2; 8.0.3; 8.0.4; 8.0.5; 8.0.6; 8.0.7 |
| CVE-2018-14718 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic… Affected: 8.0.2; 8.0.3; 8.0.4; 8.0.5; 8.0.6; 8.0.7 |
| CVE-2018-14719 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from… Affected: 8.0.2; 8.0.3; 8.0.4; 8.0.5; 8.0.6; 8.0.7 |
| CVE-2018-8013 | 9.8 | May 24 | In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the… Affected: 7.3.3.0.0 through 7.3.3.0.2; 8.0.0.0.0 through 8.0.7.1.0 |
| CVE-2017-7525 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by… Affected: 8.0.2.0.0; 8.0.3.0.0; 8.0.4.0.0; 8.0.5.0.0; 8.0.6.0.0; 8.0.7.0.0 |
| CVE-2017-15095 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending… Affected: 8.0.2; 8.0.3; 8.0.4; 8.0.5; 8.0.6; 8.0.7 |
| CVE-2017-5645 | 9.8 | Apr 17 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary… Affected: 7.3.3.0.0 through 7.3.3.0.2; 8.0.0.0.0 through 8.0.7.0.0 |
| CVE-2021-26291 | 9.1 | Apr 23 | Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a… Affected: 8.0.6.0.0 through 8.0.9.0.0; 8.1.0.0.0 through 8.1.2.0 |
Showing 18